CVE-2006-7229

HIGH

Description

The skge driver 1.5 in Linux kernel 2.6.15 on Ubuntu does not properly use the spin_lock and spin_unlock functions, which allows remote attackers to cause a denial of service (machine crash) via a flood of network traffic.

References

http://secunia.com/advisories/28971

http://www.securityfocus.com/bid/26511

http://www.ubuntu.com/usn/usn-578-1

https://bugs.launchpad.net/ubuntu/+source/linux-source-2.6.15/+bug/65631

Details

Source: MITRE

Published: 2007-11-15

Updated: 2008-09-05

Type: CWE-399

Risk Information

CVSS v2.0

Base Score: 7.8

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Impact Score: 6.9

Exploitability Score: 10

Severity: HIGH